F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices VPN Configuration Guide-6PW100

84
as the next hop of the route. For more configuration, see Network Management Configuration
Guide.
• The automatic tunnel interfaces using the same encapsulation protocol cannot use the same source
IP address.
145BConfiguration procedure
To configure an ISATAP tunnel:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Enable IPv6.
ipv6
By default, the IPv6 forwarding
function is disabled.
3. Enter tunnel interface view. interface tunnel number N/A
4. Configure an IPv6 address
for the tunnel interface.
• Configure an IPv6 global unicast
address or site-local address:
{ ipv6 address { ipv6-address
prefix-length |
ipv6-address/prefix-length }
{ ipv6 address
ipv6-address/prefix-length
eui-64
• Configure an IPv6 link-local
address:
{ ipv6 address auto link-local
{ ipv6 address ipv6 address
link-local
The IPv6 link-local address
configuration is optional.
By default:
• No IPv6 global unicast
address is configured for the
tunnel interface.
• A link-local address is
automatically generated
when an IPv6 global unicast
address or link-local address
is configured.
5. Specify the ISATAP tunnel
mode.
tunnel-protocol ipv6-ipv4 isatap
The default tunnel mode is GRE
over IPv4 mode. The same tunnel
mode should be configured at
both ends of the tunnel.
Otherwise, packet delivery fails.
6. Configure a source
address or interface for the
tunnel.
source { ip-address | interface-type
interface-number }
By default, no source address or
interface is configured for the
tunnel.
7. Return to system view.
quit N/A
8. Enable dropping of IPv6
packets using
IPv4-compatible IPv6
addresses.
tunnel discard ipv4-compatible-packet
Optional.
Disabled by default.
146BConfiguration example
383BNetwork requirements
As shown in 717HFigure 68, configure an ISATAP tunnel between the firewall and the ISATAP host so the
ISATAP host in the IPv4 network can access the IPv6 network.